Feature Request: icloud to be set up as a web application (web appliance virtual)

Hi Paul,

You can override the Category and the Risk class by defining the URL of the websites in Local Site Lists section and the Web Appliance will categorize the the website in the defined parameters. Refer to the help section for the configuration guide for Local Site lists.

Thanks

Thanks Sachin,

If I , for example, change the category to webmail, wont this then allow the users to access the whole of the icloud site?  For example, we dont want users to be able to upload/download photos, only to have access to the webmail section of the site.

regards

Paul

Hi Paul,

additional policies will allow you to create general blocks based on category.. however if you wish to pick and choose sites within a category as well as pick and choose who can / cannot have access you will need to use tags.  ie: https://community.sophos.com/products/web-appliance/f/web-appliance-hardware-or-virtual/5128/tags  sample:

in short as itunes is not supported at the application control you can create your own policy.  

you must enable https scanning as the appliance can only see complete urls with it enabled.   see this https://community.sophos.com/products/web-appliance/f/web-appliance-hardware-or-virtual/90312/why-are-my-web-applications-not-connecting

the basic steps would be:  

create local site list entries for your sites.

re-cat them to the custom category (this is a blank category)

then in your default policy, block custom

create an allow tag and either allow the category.. or apply the tag to the individual sites. 

if you wish to get more granular and pick and choose sites within the category.. create and apply the tags as necessary. 

if you wish to prevent post requests or for example a "new" message.. just export the sophos_log to your syslog server.  see this post as well  https://community.sophos.com/products/web-appliance/f/web-appliance-hardware-or-virtual/90352/list-of-downloaded-files test the url from a machine to get the exact urls .. then get the post requests for the new message .. for example gmail application control simply blocks a url similar to  https://gmail.com/compose.html  .. block the compose url and no one will be able to compose emails.. the same is true for the pictures, ftp or other transfers. 

I recommend keeping your work confined to the custom category so you can easily maintain any changes and not have to worry about going through 2 bazillion local site list entries. 

Please submit me